This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa File: wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa (raw, json) Hash identifier: 1E+Xv8wtnswf3OgqernoluNz5hyvaYNmHhkW4xlZGIc= Subject key identifier: C2:A3:12:7F:84:EB:47:35:F5:BF:59:4B:C9:5A:74:AC:2A:8C:58:B6 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597C955AC0BEDEBA455945B3FAC02A Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212271 IP address blocks: 152.89.168.0/24 maxlen: 24 152.89.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7c:95:5a:c0:be:de:ba:45:59:45:b3:fa:c0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2a3127f84eb4735f5bf594bc95a74ac2a8c58b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:53:bd:36:e6:ac:17:02:fc:91:68:8b:c8: 1b:0f:20:64:5f:f9:ec:08:fb:76:5e:2f:1e:62:79: 79:6a:2d:01:7c:db:7d:14:24:f7:85:9d:94:65:83: b9:0c:d7:89:0a:4b:30:7e:34:dc:e6:7b:57:14:1d: d7:8e:60:4b:3e:a1:e7:5b:ed:29:00:f0:1e:9d:6e: f7:b4:37:db:73:e5:65:62:1a:e4:bc:f5:d1:1c:54: 56:1f:26:52:46:f4:8f:c0:ce:47:64:ef:7c:d1:f7: 59:3f:c0:16:df:37:4a:6d:9a:97:1f:37:c0:f9:bc: 11:7b:7c:ab:dc:ca:07:03:a0:2e:dc:6c:98:d5:59: e4:c7:fc:37:20:a5:41:1c:bf:1f:0b:42:11:9a:aa: 1b:3f:aa:76:9a:5c:d9:3c:86:52:8f:55:a6:ec:e8: e0:57:10:6e:ab:63:5c:de:e8:98:92:73:2f:af:d4: f6:ff:4d:e5:18:69:5d:2c:43:d3:f6:db:73:9d:5a: 33:fa:53:4d:09:94:37:0a:ca:b1:a0:ae:e6:67:d3: 7a:57:20:a3:8f:df:fd:c9:61:53:87:b7:4d:28:af: b9:b6:87:66:99:ca:4f:e5:04:7e:c8:2a:44:d6:b0: 7e:2d:ff:f7:e6:62:d2:90:b6:9e:cd:7f:d2:c6:55: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:12:7F:84:EB:47:35:F5:BF:59:4B:C9:5A:74:AC:2A:8C:58:B6 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.168.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:c6:c3:30:b9:31:bc:24:95:5f:9e:74:85:b0:5b:42:b1:43: 7f:32:76:96:24:9a:56:44:6a:a8:37:2a:55:f6:8a:d5:53:8b: f9:c9:91:ec:02:62:37:f0:6f:6c:7f:cf:11:6a:79:76:12:87: c8:d8:30:69:85:4a:74:cc:89:4a:ad:4a:90:0e:2f:2a:05:25: cb:d3:3b:aa:00:9d:d1:ec:da:ed:a7:fc:db:8e:86:a1:da:89: 99:a1:a7:1f:c4:0c:41:68:67:43:63:50:f1:06:f6:5c:fb:3b: a8:0c:9c:05:a4:4d:c7:44:95:f2:7b:7b:10:19:10:0b:b4:44: 42:f9:de:e4:dc:e4:4d:8f:e0:e9:5a:8e:66:b2:f2:05:6c:85: 0e:f4:b1:43:da:c8:ce:cc:b7:80:0e:ab:1c:22:41:7a:47:26: 2d:da:48:b8:46:fd:3f:92:d5:9a:b9:fe:a2:62:d1:f8:59:aa: d0:25:3d:a3:f8:cc:e5:a8:a0:27:b8:25:fa:f9:5d:c0:6a:a3: 82:bd:ea:fd:e9:a9:bc:f1:60:22:56:84:05:78:d0:fd:1b:5b: dd:60:aa:0c:4d:a2:26:10:25:30:37:90:14:32:ef:c2:0d:ff: a0:1e:b9:39:84:98:41:1c:7f:39:72:65:da:df:5e:d6:d4:7e: 84:19:f7:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXyVWsC+3rpFWUWz+sAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmEzMTI3Zjg0ZWI0NzM1ZjViZjU5NGJjOTVhNzRhYzJhOGM1OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EZTvTbmrBcC/JFoi8gbDyBkX/ns CPt2Xi8eYnl5ai0BfNt9FCT3hZ2UZYO5DNeJCkswfjTc5ntXFB3XjmBLPqHnW+0p APAenW73tDfbc+VlYhrkvPXRHFRWHyZSRvSPwM5HZO980fdZP8AW3zdKbZqXHzfA +bwRe3yr3MoHA6Au3GyY1Vnkx/w3IKVBHL8fC0IRmqobP6p2mlzZPIZSj1Wm7Ojg VxBuq2Nc3uiYknMvr9T2/03lGGldLEPT9ttznVoz+lNNCZQ3CsqxoK7mZ9N6VyCj j9/9yWFTh7dNKK+5todmmcpP5QR+yCpE1rB+Lf/35mLSkLaezX/SxlUYQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMKjEn+E60c19b9ZS8ladKwqjFi2MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvd3FNU2Y0VHJSelgxdjFsTHlWcDByQ3FNV0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFmoMA0G CSqGSIb3DQEBCwUAA4IBAQBfxsMwuTG8JJVfnnSFsFtCsUN/MnaWJJpWRGqoNypV 9orVU4v5yZHsAmI38G9sf88Ranl2EofI2DBphUp0zIlKrUqQDi8qBSXL0zuqAJ3R 7Nrtp/zbjoah2omZoacfxAxBaGdDY1DxBvZc+zuoDJwFpE3HRJXye3sQGRALtERC +d7k3ORNj+DpWo5msvIFbIUO9LFD2sjOzLeADqscIkF6RyYt2ki4Rv0/ktWauf6i YtH4WarQJT2j+MzlqKAnuCX6+V3AaqOCver96am88WAiVoQFeND9G1vdYKoMTaIm ECUwN5AUMu/CDf+gHrk5hJhBHH85cmXa317W1H6EGfft -----END CERTIFICATE-----Generated at Sun Jan 25 16:56:05 2026 by rpki-client